Vulnerability tracking

[deleonio]

No description provided.

[deleonio]

• pathval@1.1.0

---

• Vulnerability: https://snyk.io/test/npm/pathval/1.1.0
• Issue:
  • CVE-2020-7751 (High) detected in pathval-1.1.0.tgz chaijs/pathval#59
  • There is a fixable vulnerability inside chaijs/pathval#61
• PR:
  • Fix Vulnerability - Ready chaijs/pathval#60
    • passed
    • reviewed
    • merged
  • fix: 🐛 fix prototype pollution chaijs/pathval#58
    • passed
    • reviewed
    • merged
• Fixed package available
• Leanup updated

[deleonio]

• nightwatch@1.5.1 › mocha@6.2.3 › yargs-unparser@1.6.0 › flat@4.1.1

---

• Vulnerability: https://snyk.io/test/npm/nightwatch@1.5.1
• Issue: Find some vulnerabilities in v1.5.1 nightwatchjs/nightwatch#2533
• PR: chore: remove again mocha from dependencies nightwatchjs/nightwatch#2537
  • passed
  • reviewed
  • merged
• Fixed package available
• Leanup updated

[deleonio]

• webpack-pwa-manifest@4.2.0 › jimp@0.6.8 › @jimp/types@0.6.8 › @jimp/jpeg@0.6.8 › jpeg-js@0.3.7
• webpack-pwa-manifest@4.2.0 › jimp@0.6.8 › @jimp/custom@0.6.8 › @jimp/core@0.6.8 › mkdirp@0.5.1 › minimist@0.0.8

---

• Vulnerability: https://snyk.io/test/npm/webpack-pwa-manifest/4.2.0
• Issue: How to fix webpack-pwa-manifest vulnerability? arthurbergmz/webpack-pwa-manifest#133
• PR:
  • chore: upgrade jimp dependency for minimist security patch arthurbergmz/webpack-pwa-manifest#137
    • passed
    • reviewed
    • merged
  • fix: update dep jimp to fix vulnerabilites arthurbergmz/webpack-pwa-manifest#145
    • passed
    • reviewed
    • merged
• Fixed package available
• Leanup updated

[deleonio]

• @leanup/cli-core-test@1.0.46 › mocha@8.2.1 › yargs@13.3.2 › y18n@4.0.0
• @leanup/cli-core-test@1.0.46 › nyc@15.1.0 › yargs@15.4.1 › y18n@4.0.0

---

• Vulnerability: https://snyk.io/test/npm/@leanup/cli-core-test/1.0.46
• Issue:
  • There is a Vulnerability in mocha v8.2.1 mochajs/mocha#4513
  • There is a Vulnerability in nyc 15.1.0 istanbuljs/nyc#1367
• PR:
  • Fix/vulnerabiliy y18n v4 mochajs/mocha#4514
    • passed
    • reviewed
    • merged
  • fix: upgrade yargs to v16 to fix a high vulnerability istanbuljs/nyc#1368
    • passed
    • reviewed
    • merged
• Fixed package available
• Leanup updated